last executing test programs: 19.31676862s ago: executing program 4 (id=1744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080), 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r5 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x9000001c}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) recvmsg(0xffffffffffffffff, 0x0, 0x40000040) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x24008084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xe0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xcc, 0x1, [@m_bpf={0xc8, 0xe, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x200}, {0x800, 0x4, 0xe, 0xd}, {0x8, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x69, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) 17.708558211s ago: executing program 3 (id=1747): syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xf1a) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10000) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) socket(0xd719433a3b8cec6f, 0x3, 0x2) 17.014737143s ago: executing program 4 (id=1749): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x40}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) signalfd(r1, &(0x7f0000000240)={[0x2]}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0xa8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK, @TCA_FLOWER_KEY_ENC_KEY_ID={0xffffff7e, 0x1a, 0x8001}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xfffffffffffffe07}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) setxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "9cfe4377ae15c9502e83b058dd0885d4"}, 0x11, 0x1) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f62, 0x80400) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 15.127524816s ago: executing program 2 (id=1750): unshare(0x64000d00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/cpuinfo\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0xffffffffffffffff, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x64, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x95800000, 0xe61e}}]}]}]}, 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000000020121000000000000000d0a000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000206050000000000000000bc735e06f6e9ed84d1c90c8d7f3a000000000005000100070000000900020073797a31000000000c000300686173683a697000050005000a0000000500040001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 15.101158441s ago: executing program 0 (id=1751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000dd0000000a0000000000", @ANYRES32, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7", @ANYRES32], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'bond0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x64, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae2db6644aeb4a62f4d2dd2bb407cfb77109be64d228e0249a08feb6ffbfecf6472d7f27949f2e387df6196e9930997f058d5cb619fe"}}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x40, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x24, 0x3d, 0x0, 0x1, [@nested={0x20, 0x122, 0x0, 0x1, [@generic="d3b34c2914bca58a0af52d7c2bbd0ac1c5a63bcebb01aa63cfd3cb7f"]}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13.753883817s ago: executing program 1 (id=1752): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @multicast1}], 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000400007012bbd7000fedbdf25027c00001800c28014000100fc010000000000000000000000000001180009"], 0x48}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = memfd_create(&(0x7f0000000440)='\x03U0f`\x0f\x16f\xc0\x9d\xae-\x99\x97\x03\x98\a\xfcakTt\x9f\xa5\v\x88\xa6\x8e@\x17%;g\x84$\xf3\x80i\n\xd2\xe2\xaf9W\xc8\x8f\xc4\x99\xd4\a\xb5\xf6\x82\xfd\xfd\xd53=\x05\xe5Z\xc7\x04\x00\x00\x00\x00\x00\x00\x00\x00.\x0e5\xf3\x88\xbf\x88\x8f\xed/\xc2\x84\xd4\x11\x93\xb899q\x0f_\xf0k\x14 68\"\xd9l\xf3\xc4u\xed\xceV\xd6Z]\x93\x93P\xbf\x05~\xde\x1f`\x95J\xfbY\x8b\xbe\xd90\xa2]\xb2\xe2\xec\x9f\xa4\xc6rF\xd8\x93?\xec\xa4\xd8\x9f\x8f\x90\xd8=\rP\xb8\x7f\xfa\xc3\xc4\xe9\xd0A@\x1d\x87\xf0\x83\x0e#p\xf4\x0e\xa0\x88g\xe0\xdba\xbcsw\xc0\xfev\xbd\xb0\xb6\x96\x8d\x11\xca\xee\xa8\xad\xaaV\xa7L\x9f\xe5J\x03\x87t\x99\x85:\xe4U\xa0c51()\x16\"(\x18G\b}\x1f\x85\x9bDP\xacQ\xbd\x1b\x00\xf4JtT{\x00^\xb1G \xe9\xbf\xd9 \x87x\xd5\x81\xdc\xf4\x8fYH\xadyk%`\xabkr\x00\xba\x9b\x98\x96*\x1c\xce$\xe1\xa2\x87I\xa6\"\xf5&,\x9fe\x1f+!n\xfb\xe7\xbf?\xc3\x80WO|\xfd\x91\xc4\xfd\x9a\t<\a\xb2Z\xd6LL\xca\xf1\xff^)f\x88\x0e\xf3\x03\x85\xe1\x10\xb6\x942\x11\xbe\x94\x1cJ\xd3i\xf8\tu\xa7\xce\x00\xc14m\xc9_\x80q\xc7?\xbaf\xadu\xe1\xd2\xd9\xf2&g\xb2\x00\xc48I\xcdy\x91\x93\xa4\xa79\x01\b\xbc\x8d\xb5\x9a\x1a\x0e\x15\r\x92\x00\x9a\xd6\xb7t\x80\xe0\xa7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa8\x80\x04\xe8O8v\xf9b\xc9\xe4d\xdd\xc8\xe2Z\tm\x02F\xf1\x9a\xb7\xa7\xab,\xcf\'\xdeb2\xac\x92\xad\xe4g\x8a5U8\xe3b\xa5\x01B/>0\xfe\xff\x1c\x0f^\xe9R\x97\x00\xd8\xb69\xb8\xbc\xaeeB\xbd\x02f7\xdas\xc22\xe8\x1dH\xdd\xe8Iwm\xee,\xbf\xe0\xbezq\x1b\a\x97\xbe\xa5\xdcy\f\x83\x05=\x92`\x03\xceX\xbb\x05\xfe\x80\xc7<%\xec\xac\xc3\x1c\xa2\x9d\x95q\xc0{6\x90Y\xe9\x17\x82q\x05X\x84\x83\x1c\xe7\xf1\x18\xc5\xe54\x1ah~$\xf7\xab\x93\x9b\xd1CUg\xf5\xdf\xa9\xe4\xd3\xe5\x00\x00\x00\x00\x00\x16\xde\xdc\x06\xeb\xa0\xf2\x95\x13M\"?\xf5/\x8f\a\r\x8fo)y\x0f\x9aR\'\xf0C\xee\xff\xfdn\x15b\xdcv\xd1J\xdc\xded\xd1\x1e', 0x2) ioctl$FICLONE(r4, 0x40049409, r4) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) syz_usbip_server_init(0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000180000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000000000000000000000080000020040400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072000000000000000020000000007fdc47d1e130d38db4d980"], 0x50) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000180)=ANY=[@ANYBLOB="4dc400020000004030144b47400001020301090236000101ff40bd090400000101032005fb2201690c070009050800080001050504250100"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 13.688300052s ago: executing program 3 (id=1753): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) 13.259794947s ago: executing program 4 (id=1754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r7 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4080) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040630415120000000000010902240001000000090904000401030000000921040004012207000905810320"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 12.64387217s ago: executing program 0 (id=1755): openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8935, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x440) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}}, 0x0) 11.934277807s ago: executing program 2 (id=1756): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) 9.822382903s ago: executing program 0 (id=1757): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') r9 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r8}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 9.656116109s ago: executing program 1 (id=1758): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) pread64(0xffffffffffffffff, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r8 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 9.373955743s ago: executing program 3 (id=1759): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000340)={0x9, 0x6, 0x3}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r7, 0x0, r7, &(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="e5e77e34b239e867eac94e45e1df8998b00957adf7680f7865ea781e26af3a7484b89faca5c6d72d7df45b8d4122a6a56bb037819865519b3b5a99700771439428afa0dd71def6e8dd92b0f5ef501f6d0ba938fc6633c0dbc1995475197279feba29432cda9ebb9b4b9c962153b67a6b32664fdbbd3385662fa277cd92b61bce82d354e0503ad606e3b68efc87d00c81a9fe4300f053270a6f9d3ec7b55d5149609611046d4e0aa081db02914b1c16f9b665478f0370dfb558627dd9"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xba7cc859afa61d4a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 8.35428604s ago: executing program 4 (id=1761): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) socket$inet6_udplite(0xa, 0x2, 0x88) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) 6.83022685s ago: executing program 0 (id=1762): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x3, 0x12, 0xffffffffffffffff, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r9, 0x0, 0x20001) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x1}, 0x10}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r6, 0x12, 0x0, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.781117621s ago: executing program 1 (id=1763): openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) write$input_event(r5, &(0x7f0000000140)={{0x0, 0xea60}, 0x7, 0x7, 0x17f}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080080001400000000008"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.725180826s ago: executing program 2 (id=1764): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) 5.706291101s ago: executing program 3 (id=1765): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd29, 0x0, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.961505488s ago: executing program 0 (id=1766): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000006c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x3, 0x9, 0xffffffff, 0x1}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x4000000001}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x78, 0x2, 0x4, 0x2}}], 0x150}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r3, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000e97000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000}) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.874362458s ago: executing program 4 (id=1767): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x8, 0x0, 0xb49, 0x8000009, 0x7, 0x2, 0xc59}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7", @ANYRES32], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x32, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae2db664"}}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400000002500090122bd7008f9ffffff0200000024003d8020002280d3b34c2914bca58a0af52d7c2bbd0ac1c5a63bcebb01aa63cfd3cb7f0800030047000000958848d6493e05a753ee9ddcbdf5461f6968fcf106773f971900d6462820a07d93108b78550d72"], 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f00000047c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f00000037c0)=""/4096, 0xfffffef3}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000002004000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ff51000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913d3c7cc59466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc4e51d2305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd574717ceaaa3b378cf546d48e4e9ee414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000a946a5345ae751cdf77af5171ab9aadabef2a07468eb3ac25ddd843229713837f78826137300f90ade789099ed29c773a3cf65bfd9bf48045d80de6adc2f85e6f140ede4a4307944b5a7462a545a7624ce64ec971e32c0173250e42ca339b4cc5040194ffac5f7a7e38d097c004f8eb48c604fd2a417b329c0af4841a5d72e44b4b9547df6fe"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x36}, 0x94) 3.131189721s ago: executing program 2 (id=1768): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000340)={0x9, 0x6, 0x3}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r7, 0x0, r7, &(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="e5e77e34b239e867eac94e45e1df8998b00957adf7680f7865ea781e26af3a7484b89faca5c6d72d7df45b8d4122a6a56bb037819865519b3b5a99700771439428afa0dd71def6e8dd92b0f5ef501f6d0ba938fc6633c0dbc1995475197279feba29432cda9ebb9b4b9c962153b67a6b32664fdbbd3385662fa277cd92b61bce82d354e0503ad606e3b68efc87d00c81a9fe4300f053270a6f9d3ec7b55d5149609611046d4e0aa081db02914b1c16f9b665478f0370dfb558627dd9"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xba7cc859afa61d4a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) 3.037439237s ago: executing program 1 (id=1769): connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r0, 0x402, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) 1.455686381s ago: executing program 1 (id=1771): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) unshare(0x10010000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x404, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x20000000095, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x64, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x3, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x9, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000810000"], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x6, 0xc}, 0xc) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 686.701257ms ago: executing program 0 (id=1772): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) pread64(0xffffffffffffffff, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r8 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 586.591513ms ago: executing program 4 (id=1773): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) pread64(0xffffffffffffffff, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r8 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 255.369999ms ago: executing program 3 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock2(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000002c0)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f00000001c0)={{r9, r8, 0x1, [0x104, 0xf7df]}, {r10, r11, 0x4, [0x6, 0xfffff7ff]}, 0x2, [0x2, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 124.084986ms ago: executing program 1 (id=1775): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_setup(0x1c6e, &(0x7f0000000480)={0x0, 0xe75a, 0x8000, 0x1, 0x1dc}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000010000)='asymmetric\x00', &(0x7f0000000400)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000400005000200890000000800014000000012080006400000000208000440000000170900010073797a30000000000900020073793a32000000001400"], 0x94}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00006bd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000330000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003b8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003eb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0x200c89d, 0x20, 0x8001, 0x20002f7}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) kernel console output (not intermixed with test programs): new high-speed USB device number 36 using dummy_hcd [ 812.475548][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 812.482055][ T5904] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 812.568758][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 812.595704][ T10] usb 5-1: config 0 has no interface number 0 [ 812.629776][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 812.675706][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 812.691246][ T5904] usb 3-1: config 0 has no interfaces? [ 812.720270][ T5904] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 812.735741][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.765764][ T5904] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.775724][ T10] usb 5-1: Product: syz [ 812.779956][ T10] usb 5-1: Manufacturer: syz [ 812.784821][ T10] usb 5-1: SerialNumber: syz [ 812.822309][ T5904] usb 3-1: Manufacturer: syz [ 812.986737][ T5904] usb 3-1: config 0 descriptor?? [ 812.996577][ T10] usb 5-1: config 0 descriptor?? [ 813.234251][T12436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.244506][T12436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.945611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 814.207938][ T1217] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 814.435924][ T1217] usb 4-1: Using ep0 maxpacket: 8 [ 814.521495][ T1217] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 814.875994][ T1217] usb 4-1: config 0 has no interface number 0 [ 815.264692][ T10] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 815.324664][ T10] usb 5-1: USB disconnect, device number 36 [ 815.373577][ T1217] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 815.439319][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.568790][ T1217] usb 4-1: Product: syz [ 815.599772][ T1217] usb 4-1: Manufacturer: syz [ 815.616140][ T1217] usb 4-1: SerialNumber: syz [ 815.721366][ T1217] usb 4-1: config 0 descriptor?? [ 816.001182][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.013702][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.266243][ T10] usb 3-1: USB disconnect, device number 29 [ 817.852055][T12474] netlink: 'syz.2.1286': attribute type 2 has an invalid length. [ 817.888776][T12474] !: entered promiscuous mode [ 817.902915][T12474] netlink: 'syz.2.1286': attribute type 2 has an invalid length. [ 819.252960][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 819.262599][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 819.321498][T12483] netlink: 'syz.2.1288': attribute type 4 has an invalid length. [ 819.579075][ T1217] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 819.617024][ T1217] usb 4-1: USB disconnect, device number 41 [ 820.445790][ T1217] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 820.521001][T12496] fuse: Bad value for 'fd' [ 820.647181][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 820.668479][ T1217] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.710114][ T1217] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.746629][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 820.791179][ T1217] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 820.820077][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.865794][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 821.135744][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 821.158730][ T10] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 821.172180][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.188121][ T10] usb 5-1: Product: syz [ 821.192621][ T10] usb 5-1: Manufacturer: syz [ 821.197411][ T10] usb 5-1: SerialNumber: syz [ 821.338979][ T10] usb 5-1: config 0 descriptor?? [ 821.350936][ T10] as10x_usb: device has been detected [ 821.357229][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 821.373408][ T1217] usb 4-1: config 0 descriptor?? [ 821.401396][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 821.452903][ T10] as10x_usb: error during firmware upload part1 [ 821.551984][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1291'. [ 821.593314][T12496] random: crng reseeded on system resumption [ 821.730076][ T10] Registered device Sky IT Digital Key (green led) [ 822.087243][ T1217] nzxt-smart2 0003:1E71:2009.0008: collection stack underflow [ 822.135872][ T1217] nzxt-smart2 0003:1E71:2009.0008: item 0 4 0 12 parsing failed [ 822.206234][ T1217] nzxt-smart2 0003:1E71:2009.0008: probe with driver nzxt-smart2 failed with error -22 [ 822.326724][ T1217] usb 4-1: USB disconnect, device number 42 [ 822.578215][T12511] blktrace: Concurrent blktraces are not allowed on sg0 [ 826.026494][ T10] usb 5-1: USB disconnect, device number 37 [ 826.095394][T12526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1728497071 (13827976568 ns) > initial count (134217856 ns). Using initial count to start timer. [ 826.252253][ T10] Unregistered device Sky IT Digital Key (green led) [ 826.259230][ T10] as10x_usb: device has been disconnected [ 826.915850][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 827.186263][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 827.205057][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 827.213910][ T10] usb 5-1: config 0 has no interface number 0 [ 827.238903][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 827.275103][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.323333][ T10] usb 5-1: Product: syz [ 827.805150][ T10] usb 5-1: Manufacturer: syz [ 827.810479][ T10] usb 5-1: SerialNumber: syz [ 827.839720][ T10] usb 5-1: config 0 descriptor?? [ 828.097805][T12536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.119062][T12536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.088091][ T10] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 830.133890][ T10] usb 5-1: USB disconnect, device number 38 [ 830.299407][T12572] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 830.367559][T12570] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 830.618651][T12586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.500160][T12590] xt_bpf: check failed: parse error [ 832.780822][T12595] fuse: Bad value for 'fd' [ 832.919737][T12602] fuse: Bad value for 'fd' [ 833.056131][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 833.365723][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 833.375786][ T29] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 833.392179][ T10] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 833.484017][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.528546][ T10] usb 4-1: Product: syz [ 833.540407][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 833.540407][ T10] usb 4-1: Manufacturer: syz [ 833.560573][ T10] usb 4-1: SerialNumber: syz [ 833.570620][ T29] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 833.583402][ T10] usb 4-1: config 0 descriptor?? [ 833.600559][ T10] as10x_usb: device has been detected [ 834.189765][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.200369][ T29] usb 1-1: Product: syz [ 834.207862][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 834.216671][ T29] usb 1-1: Manufacturer: syz [ 834.240245][ T29] usb 1-1: SerialNumber: syz [ 834.250997][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 834.296668][ T10] as10x_usb: error during firmware upload part1 [ 834.319486][ T10] Registered device Sky IT Digital Key (green led) [ 834.416672][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 834.445914][ T29] usb 1-1: config 0 descriptor?? [ 834.465461][T12595] random: crng reseeded on system resumption [ 835.116250][T12614] program syz.0.1312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 835.130400][T12604] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1312'. [ 835.211280][ T29] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 835.232663][ T29] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 835.261295][ T29] usb 1-1: USB disconnect, device number 37 [ 835.482120][T12618] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 835.614511][T12620] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 835.627180][T12620] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 836.687303][T12620] bond2: (slave gretap1): making interface the new active one [ 836.798731][T12620] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 837.720192][ T29] usb 4-1: USB disconnect, device number 43 [ 837.766814][ T29] Unregistered device Sky IT Digital Key (green led) [ 837.768284][ T29] as10x_usb: device has been disconnected [ 838.661531][ T30] audit: type=1326 audit(1775855896.899:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 838.961548][ T30] audit: type=1326 audit(1775855896.899:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.055906][ T30] audit: type=1326 audit(1775855896.909:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.118577][ T30] audit: type=1326 audit(1775855896.909:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.304851][ T30] audit: type=1326 audit(1775855896.909:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.387740][ T30] audit: type=1326 audit(1775855896.909:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.412712][ T30] audit: type=1326 audit(1775855896.909:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.439335][ T30] audit: type=1326 audit(1775855896.909:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.813643][ T30] audit: type=1326 audit(1775855896.909:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 839.965068][ T30] audit: type=1326 audit(1775855896.909:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 841.254546][T12674] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 841.272961][T12674] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 842.015897][ T5904] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 842.254434][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 842.406847][T12683] binder: BINDER_SET_CONTEXT_MGR already set [ 842.413102][T12683] binder: 12680:12683 ioctl 4018620d 200000004a80 returned -16 [ 842.466239][ T5904] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 842.475710][ T5904] usb 4-1: config 0 has no interface number 0 [ 842.487258][ T5904] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 842.505776][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.517433][ T5904] usb 4-1: Product: syz [ 842.521790][ T5904] usb 4-1: Manufacturer: syz [ 842.527191][ T5904] usb 4-1: SerialNumber: syz [ 842.540344][ T5904] usb 4-1: config 0 descriptor?? [ 842.810833][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.031631][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.066378][T12693] binder: BINDER_SET_CONTEXT_MGR already set [ 844.073188][T12693] binder: 12689:12693 ioctl 4018620d 200000004a80 returned -16 [ 844.995614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 845.024891][T12699] fuse: Bad value for 'fd' [ 845.279099][ T1217] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 845.475757][ T1217] usb 5-1: Using ep0 maxpacket: 16 [ 845.538615][ T1217] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 845.566437][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.895878][ T1217] usb 5-1: Product: syz [ 845.907209][ T1217] usb 5-1: Manufacturer: syz [ 845.946943][ T1217] usb 5-1: SerialNumber: syz [ 845.960841][ T1217] usb 5-1: config 0 descriptor?? [ 846.008258][ T1217] as10x_usb: device has been detected [ 846.023999][ T1217] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 846.058239][ T1217] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 846.110656][ T1217] as10x_usb: error during firmware upload part1 [ 846.165863][ T1217] Registered device Sky IT Digital Key (green led) [ 846.211377][T12699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'. [ 846.241265][T12699] random: crng reseeded on system resumption [ 846.384930][T12710] libceph: resolve '0..' (ret=-3): failed [ 847.085871][ T5904] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 847.138777][ T5904] usb 4-1: USB disconnect, device number 44 [ 847.725752][ T5904] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 847.895789][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 848.108546][T12723] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 848.155737][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 848.155760][ T30] audit: type=1326 audit(1775855906.409:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.0.1336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac6959c819 code=0x0 [ 848.189241][ T5904] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 848.209415][ T5904] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 848.285884][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 848.355318][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 848.385085][ T5904] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.446585][ T5904] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 848.525689][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 848.554401][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.577291][ T29] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 848.703721][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 848.764029][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.776527][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 848.791294][ T5904] usb 4-1: usb_control_msg returned -32 [ 848.805046][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 848.827504][ T5904] usbtmc 4-1:16.0: can't read capabilities [ 848.878828][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 848.922564][ T29] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 848.938093][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.974356][ T10] usb 1-1: Product: syz [ 849.000420][ T10] usb 1-1: Manufacturer: syz [ 849.023213][ T10] usb 1-1: SerialNumber: syz [ 849.053149][ T10] usb 1-1: config 0 descriptor?? [ 849.075695][ T29] usb 3-1: config 0 has no interface number 0 [ 849.089550][ T1217] usb 5-1: USB disconnect, device number 39 [ 849.105025][ T1217] Unregistered device Sky IT Digital Key (green led) [ 849.144772][T12732] as102_open: can't find device for minor 0 [ 849.193429][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 849.220354][ T1217] as10x_usb: device has been disconnected [ 849.290397][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.317778][ T29] usb 3-1: Product: syz [ 849.339744][ T29] usb 3-1: Manufacturer: syz [ 849.381904][ T29] usb 3-1: SerialNumber: syz [ 849.491765][ T29] usb 3-1: config 0 descriptor?? [ 849.775451][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.784811][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.985777][ T5933] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 850.155752][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 850.222018][ T5933] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.301539][ T5933] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.437159][ T5933] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.558245][ T5933] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.614917][ T5882] usb 4-1: USB disconnect, device number 45 [ 850.840666][ T5933] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 850.921313][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.233070][ T5933] usb 5-1: GET_CAPABILITIES returned 0 [ 851.329333][ T5933] usbtmc 5-1:16.0: can't read capabilities [ 851.397457][ T5882] usb 1-1: USB disconnect, device number 38 [ 851.708179][T12751] blktrace: Concurrent blktraces are not allowed on sg0 [ 851.741930][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 852.177745][ T29] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 852.199874][ T29] usb 3-1: USB disconnect, device number 30 [ 852.908793][T12767] fuse: Bad value for 'rootmode' [ 852.995226][T12768] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 853.056052][ T5882] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 853.215856][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 853.263715][ T5882] usb 1-1: config 0 has no interfaces? [ 853.271718][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.355770][ T5882] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.384573][ T5882] usb 1-1: Manufacturer: syz [ 853.447879][ T5882] usb 1-1: config 0 descriptor?? [ 853.524664][T12766] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 853.650060][T12766] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 853.780964][T12773] bond2: (slave gretap1): making interface the new active one [ 853.878260][T12758] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 853.976017][T12773] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 854.280953][T12768] macvlan2: entered promiscuous mode [ 854.286835][T12768] macvlan2: entered allmulticast mode [ 854.296351][T12768] bond2: entered promiscuous mode [ 854.301855][T12768] gretap1: entered promiscuous mode [ 854.312508][T12768] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 854.336711][T12768] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 854.359352][T12768] bond2: left promiscuous mode [ 854.378235][T12768] gretap1: left promiscuous mode [ 854.747668][T12778] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 854.759000][T12778] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 854.857398][T12778] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 854.869097][T12778] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 855.167434][T12778] bond3: (slave gretap1): making interface the new active one [ 855.177073][T12778] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 855.352658][ T29] usb 5-1: USB disconnect, device number 40 [ 856.298075][T12791] futex_wake_op: syz.3.1348 tries to shift op by -1; fix this program [ 856.936230][ T5933] usb 1-1: USB disconnect, device number 39 [ 857.436850][ T5933] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 858.050215][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 858.194734][ T5933] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 858.203718][ T5933] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.227896][T12810] binder: 12805:12810 ioctl 4018620d 0 returned -22 [ 858.255978][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.266384][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 858.278127][ T5933] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.414308][ T5933] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 858.425041][T12815] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1353'. [ 858.494703][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.821580][T12819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.849507][ T5933] usb 1-1: usb_control_msg returned -32 [ 858.869616][ T5933] usbtmc 1-1:16.0: can't read capabilities [ 859.786616][T12821] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 859.993194][ T5933] usb 1-1: USB disconnect, device number 40 [ 860.689629][T12807] binder: 12805:12807 ioctl d000941e 0 returned -22 [ 861.006415][ T797] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 861.090739][T12839] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 861.195713][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 861.245134][ T797] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 861.267064][ T797] usb 3-1: config 0 has no interface number 0 [ 861.309615][T12838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 861.387707][T12840] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 861.434644][ T797] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 861.527468][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.778892][ T797] usb 3-1: Product: syz [ 861.808374][ T797] usb 3-1: Manufacturer: syz [ 861.839315][ T797] usb 3-1: SerialNumber: syz [ 861.870963][ T797] usb 3-1: config 0 descriptor?? [ 862.162854][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.172002][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.092429][T12854] fuse: Bad value for 'fd' [ 863.456859][ T29] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 863.642663][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 863.777980][ T29] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 863.803051][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.896506][ T29] usb 4-1: Product: syz [ 864.062623][ T29] usb 4-1: Manufacturer: syz [ 864.068216][ T797] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 864.100418][ T797] usb 3-1: USB disconnect, device number 31 [ 864.106936][ T29] usb 4-1: SerialNumber: syz [ 864.151424][ T29] usb 4-1: config 0 descriptor?? [ 864.217358][ T29] as10x_usb: device has been detected [ 864.266645][ T29] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 864.398105][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 864.419415][T12854] random: crng reseeded on system resumption [ 864.466890][ T29] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 864.505142][ T29] as10x_usb: error during firmware upload part1 [ 864.526466][ T29] Registered device Sky IT Digital Key (green led) [ 865.695896][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 866.030821][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 866.044955][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 866.093337][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 866.145967][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 866.234100][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 866.267881][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 866.323004][ T10] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 866.381540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.415676][ T10] usb 3-1: Product: syz [ 866.425882][ T10] usb 3-1: Manufacturer: syz [ 866.471007][ T10] usb 3-1: SerialNumber: syz [ 866.776548][ T10] usb 3-1: config 0 descriptor?? [ 866.872290][ T10] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 866.906375][ T1217] usb 4-1: USB disconnect, device number 46 [ 866.944553][ T1217] Unregistered device Sky IT Digital Key (green led) [ 866.948992][ T1217] as10x_usb: device has been disconnected [ 867.004947][ T10] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 867.801836][T12889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.826388][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 868.025750][ T10] usb 5-1: device descriptor read/64, error -71 [ 868.286627][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 868.435756][ T10] usb 5-1: device descriptor read/64, error -71 [ 868.582025][ T10] usb usb5-port1: attempt power cycle [ 869.095786][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 869.191874][ T10] usb 5-1: device descriptor read/8, error -71 [ 869.287081][ T1217] usb 3-1: USB disconnect, device number 32 [ 869.455827][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 869.477625][ T10] usb 5-1: device descriptor read/8, error -71 [ 869.587130][ T10] usb usb5-port1: unable to enumerate USB device [ 869.850342][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 870.455372][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.475821][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.675859][ T1217] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 870.875802][ T1217] usb 1-1: Using ep0 maxpacket: 16 [ 870.896962][ T1217] usb 1-1: config 0 has no interfaces? [ 870.909093][ T1217] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 870.919111][ T1217] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 870.939924][ T1217] usb 1-1: Manufacturer: syz [ 870.972146][ T1217] usb 1-1: config 0 descriptor?? [ 872.005719][ T797] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 873.543043][ T797] usb 5-1: device descriptor read/64, error -71 [ 873.785753][ T797] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 873.840745][ T1217] usb 1-1: USB disconnect, device number 41 [ 873.947352][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 873.975198][ T797] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 874.021793][ T797] usb 5-1: config 0 has no interface number 0 [ 874.050948][ T797] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 874.078207][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.308930][ T797] usb 5-1: Product: syz [ 874.335499][ T797] usb 5-1: Manufacturer: syz [ 874.399953][ T797] usb 5-1: SerialNumber: syz [ 874.415834][ T797] usb 5-1: config 0 descriptor?? [ 874.530016][T12932] dummy0: entered allmulticast mode [ 874.649295][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.662531][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.673316][T12937] fuse: Bad value for 'fd' [ 875.955773][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 876.194599][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 876.216982][ T10] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 876.226436][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.234577][ T10] usb 3-1: Product: syz [ 876.240266][ T10] usb 3-1: Manufacturer: syz [ 876.244939][ T10] usb 3-1: SerialNumber: syz [ 876.262524][ T10] usb 3-1: config 0 descriptor?? [ 876.306722][ T797] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 876.379280][ T797] usb 5-1: USB disconnect, device number 46 [ 876.400089][ T10] as10x_usb: device has been detected [ 876.416501][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 876.463646][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 876.676408][T12949] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 876.685377][T12949] usb usb2: Process 12949 (syz.0.1379) called USBDEVFS_RESETEP for active endpoint 0x81 [ 876.700103][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1377'. [ 876.779181][ T10] as10x_usb: error during firmware upload part1 [ 876.801156][T12937] random: crng reseeded on system resumption [ 876.913216][ T10] Registered device Sky IT Digital Key (green led) [ 879.553252][T12976] futex_wake_op: syz.3.1384 tries to shift op by -1; fix this program [ 879.792391][T12979] kAFS: unable to lookup cell '' [ 880.851890][ T5882] usb 3-1: USB disconnect, device number 33 [ 880.903920][ T5882] Unregistered device Sky IT Digital Key (green led) [ 880.911755][ T5882] as10x_usb: device has been disconnected [ 881.434424][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1387'. [ 881.537786][ T5882] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 881.756307][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 881.776333][ T5882] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 881.785046][ T5882] usb 3-1: config 0 has no interface number 0 [ 881.819326][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 881.835820][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.844198][ T5882] usb 3-1: Product: syz [ 881.852086][ T5882] usb 3-1: Manufacturer: syz [ 881.861951][ T5882] usb 3-1: SerialNumber: syz [ 881.883772][ T5882] usb 3-1: config 0 descriptor?? [ 882.060177][T12997] netlink: 'syz.1.1389': attribute type 1 has an invalid length. [ 882.208288][T12998] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 882.227003][T12998] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 882.244086][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.257858][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.948998][T12997] macvlan2: entered promiscuous mode [ 882.954584][T12997] macvlan2: entered allmulticast mode [ 882.966025][T12997] bond4: entered promiscuous mode [ 882.976420][T12997] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 883.002761][T12997] bond4: left promiscuous mode [ 883.635817][ T5891] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 883.836812][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 883.911086][ T5891] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 883.948852][ T5891] usb 5-1: config 0 has no interface number 0 [ 884.038337][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 884.047941][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.057511][ T5891] usb 5-1: Product: syz [ 884.065834][ T5891] usb 5-1: Manufacturer: syz [ 884.084088][ T5891] usb 5-1: SerialNumber: syz [ 884.143030][ T5891] usb 5-1: config 0 descriptor?? [ 884.347486][T13016] dummy0: entered allmulticast mode [ 884.431229][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.447402][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.109258][T13021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1392'. [ 885.662778][ T5882] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 885.993443][ T5882] usb 3-1: USB disconnect, device number 34 [ 887.369960][ T5891] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 887.403196][ T5891] usb 5-1: USB disconnect, device number 47 [ 888.608743][T13046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 888.615369][T13046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 888.805791][T13046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 888.824924][T13046] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 888.999478][T13053] fuse: Bad value for 'fd' [ 889.019583][T13046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 889.073956][T13046] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 889.164939][T13046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 889.216149][T13046] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 889.541884][T13057] binder: 13054:13057 ioctl 4018620d 0 returned -22 [ 889.725755][ T5882] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 890.052094][T13063] binder: 13054:13063 ioctl d000941e 0 returned -22 [ 890.146442][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 890.172940][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 890.269225][T13065] netlink: 'syz.2.1401': attribute type 4 has an invalid length. [ 890.278997][T13065] netlink: 'syz.2.1401': attribute type 4 has an invalid length. [ 890.546011][ T5882] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 890.589946][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.617661][ T5882] usb 4-1: Product: syz [ 890.630219][ T5882] usb 4-1: Manufacturer: syz [ 890.639848][ T5882] usb 4-1: SerialNumber: syz [ 890.677999][ T5882] usb 4-1: config 0 descriptor?? [ 890.713561][ T5882] as10x_usb: device has been detected [ 890.722757][ T5882] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 890.760814][ T5882] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 890.887105][ T5882] as10x_usb: error during firmware upload part1 [ 890.893637][ T5882] Registered device Sky IT Digital Key (green led) [ 890.898931][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 890.945403][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1399'. [ 891.063170][T13071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.107441][T13053] random: crng reseeded on system resumption [ 891.148526][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 891.185725][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 892.249344][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 892.947682][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 893.123174][ T5891] usb 4-1: USB disconnect, device number 47 [ 893.160629][ T5891] Unregistered device Sky IT Digital Key (green led) [ 893.167573][ T5891] as10x_usb: device has been disconnected [ 893.185976][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 893.266330][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 894.066814][ T5891] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 894.597742][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.616788][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 894.636243][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 894.655772][ T5891] usb 4-1: Product: syz [ 894.666190][ T5891] usb 4-1: Manufacturer: syz [ 894.671090][ T5891] usb 4-1: SerialNumber: syz [ 894.969497][ T5891] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 895.267371][ C0] usblp0: nonzero write bulk status received: -71 [ 895.292090][ T5891] usb 4-1: USB disconnect, device number 48 [ 895.323529][ T5891] usblp0: removed [ 896.037528][T13114] fuse: Bad value for 'fd' [ 896.149221][T13104] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 898.000511][ T30] audit: type=1326 audit(1775855956.259:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.3.1412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f043559c819 code=0x0 [ 900.821140][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 900.886562][T13157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.398688][ T10] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 901.595686][ T1217] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 901.623341][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 901.633190][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.641581][ T10] usb 1-1: Product: syz [ 901.649896][ T10] usb 1-1: Manufacturer: syz [ 901.654678][ T10] usb 1-1: SerialNumber: syz [ 901.674806][ T10] usb 1-1: config 0 descriptor?? [ 901.685494][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 901.799257][ T1217] usb 3-1: Using ep0 maxpacket: 16 [ 901.878992][ T1217] usb 3-1: config 0 has no interfaces? [ 901.912081][ T1217] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 901.988730][ T1217] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.058393][ T1217] usb 3-1: Manufacturer: syz [ 902.168015][ T1217] usb 3-1: config 0 descriptor?? [ 902.307327][ T10] gspca_stk1135: reg_w 0x2 err -110 [ 902.313788][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 902.339136][ T10] gspca_stk1135: Sensor write failed [ 902.376097][T13171] kAFS: unable to lookup cell '' [ 902.385163][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 902.558808][ T10] gspca_stk1135: Sensor write failed [ 902.565111][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 902.574252][ T10] gspca_stk1135: Sensor read failed [ 902.580712][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 902.605659][ T10] gspca_stk1135: Sensor read failed [ 902.923719][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 903.204472][T13175] xt_cgroup: invalid path, errno=-2 [ 903.482481][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 903.500464][ T10] gspca_stk1135: Sensor read failed [ 903.514410][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 903.600612][ T10] gspca_stk1135: Sensor read failed [ 903.630737][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 903.680315][ T10] gspca_stk1135: Sensor write failed [ 903.700763][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 903.708902][ T10] gspca_stk1135: Sensor write failed [ 903.715201][ T10] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 904.010877][ T1217] usb 3-1: USB disconnect, device number 35 [ 904.436399][ T797] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 904.613652][ T797] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 904.626665][ T797] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 904.765458][ T797] usb 5-1: config 171 has no interface number 0 [ 904.852065][ T797] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 904.991745][ T797] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 905.021123][ T797] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 905.042453][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.173423][ T797] usb 5-1: Product: syz [ 905.178466][ T797] usb 5-1: Manufacturer: syz [ 905.184611][ T797] usb 5-1: SerialNumber: syz [ 905.217998][T13178] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 906.306038][ T797] ath6kl: Failed to submit usb control message: -110 [ 906.312999][ T797] ath6kl: unable to send the bmi data to the device: -110 [ 906.329050][ T797] ath6kl: Unable to send get target info: -110 [ 906.353601][ T797] ath6kl: Failed to init ath6kl core: -110 [ 906.399231][T13192] netlink: 'syz.4.1421': attribute type 21 has an invalid length. [ 906.407984][ T797] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 906.445857][T13192] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1421'. [ 906.489289][T13193] netlink: 'syz.4.1421': attribute type 21 has an invalid length. [ 906.500653][T13193] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1421'. [ 906.673428][ T5882] usb 1-1: USB disconnect, device number 42 [ 907.298209][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 907.385190][T13213] fuse: Bad value for 'fd' [ 907.696209][ T5882] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 907.735721][ T797] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 907.918278][ T29] usb 5-1: USB disconnect, device number 48 [ 908.033298][ T5882] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 908.045769][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 908.073236][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.100770][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 908.129595][ T797] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 908.143229][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.166972][ T797] usb 4-1: Product: syz [ 908.174914][ T797] usb 4-1: Manufacturer: syz [ 908.187073][ T797] usb 4-1: SerialNumber: syz [ 908.212623][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.222575][ T797] usb 4-1: config 0 descriptor?? [ 908.282506][ T797] as10x_usb: device has been detected [ 908.303891][ T797] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 908.316721][ T5882] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 908.371553][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 908.390932][ T5882] usb 3-1: Product: syz [ 908.461169][ T797] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 908.476805][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 908.520430][ T797] as10x_usb: error during firmware upload part1 [ 908.541190][ T797] Registered device Sky IT Digital Key (green led) [ 908.693466][ T5882] usb 3-1: Manufacturer: syz [ 908.806934][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 908.911461][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 908.956549][T13207] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 908.980782][ T5882] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 910.307953][T13236] syz_tun: left allmulticast mode [ 910.317003][T13236] netlink: 'syz.0.1431': attribute type 8 has an invalid length. [ 910.751866][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 911.211926][ T10] usb 4-1: USB disconnect, device number 49 [ 911.248312][ T10] Unregistered device Sky IT Digital Key (green led) [ 911.249668][ T10] as10x_usb: device has been disconnected [ 911.584130][T13242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1433'. [ 911.755898][ T29] usb 3-1: USB disconnect, device number 36 [ 912.274974][ T797] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 912.578020][ T797] usb 5-1: config index 0 descriptor too short (expected 51227, got 27) [ 912.596064][ T797] usb 5-1: config 24 has too many interfaces: 199, using maximum allowed: 32 [ 912.640390][ T797] usb 5-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config [ 912.707993][ T797] usb 5-1: config 24 has 0 interfaces, different from the descriptor's value: 199 [ 912.741231][ T797] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 912.755666][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.821830][ T797] usb 5-1: Product: syz [ 912.822746][T13251] nvme_fabrics: missing parameter 'transport=%s' [ 912.841640][ T797] usb 5-1: Manufacturer: syz [ 912.853340][ T797] usb 5-1: SerialNumber: syz [ 913.003034][T13251] nvme_fabrics: missing parameter 'nqn=%s' [ 913.336960][ T797] usb 5-1: USB disconnect, device number 49 [ 914.804291][T13273] xfrm1: entered allmulticast mode [ 915.236856][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 915.642055][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 915.670315][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.745728][ T10] usb 1-1: Product: syz [ 915.759804][ T10] usb 1-1: Manufacturer: syz [ 915.825300][ T10] usb 1-1: SerialNumber: syz [ 915.867950][ T10] usb 1-1: config 0 descriptor?? [ 915.936669][ T10] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 915.958036][ T10] usb 1-1: bad CDC descriptors [ 915.980194][ T10] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 916.910482][T13290] fuse: Bad value for 'fd' [ 917.228352][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 917.429574][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 917.454159][ T29] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 917.463888][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.490075][ T29] usb 3-1: Product: syz [ 917.498334][ T29] usb 3-1: Manufacturer: syz [ 917.508039][ T29] usb 3-1: SerialNumber: syz [ 917.524361][ T29] usb 3-1: config 0 descriptor?? [ 917.742504][ T29] as10x_usb: device has been detected [ 917.756297][ T29] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 917.784352][ T29] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 917.895651][ T5882] usb 1-1: USB disconnect, device number 43 [ 917.943115][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1443'. [ 917.961275][T13290] random: crng reseeded on system resumption [ 918.206601][ T29] as10x_usb: error during firmware upload part1 [ 918.218513][ T29] Registered device Sky IT Digital Key (green led) [ 919.664511][ T29] usb 3-1: USB disconnect, device number 37 [ 919.683072][ T29] Unregistered device Sky IT Digital Key (green led) [ 919.687023][ T29] as10x_usb: device has been disconnected [ 920.085619][T12262] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 920.255754][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 920.311866][T12262] usb 4-1: Using ep0 maxpacket: 8 [ 920.422021][T12262] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 920.435820][T12262] usb 4-1: config 0 has no interface number 0 [ 920.447157][T12262] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 920.456798][T12262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.465275][T12262] usb 4-1: Product: syz [ 920.475607][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 920.483642][ T29] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 920.492280][ T29] usb 3-1: config 0 has no interface number 0 [ 920.499698][T12262] usb 4-1: Manufacturer: syz [ 920.520624][T12262] usb 4-1: SerialNumber: syz [ 920.528972][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 920.538475][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.574633][T12262] usb 4-1: config 0 descriptor?? [ 920.587472][ T29] usb 3-1: Product: syz [ 920.615818][ T29] usb 3-1: Manufacturer: syz [ 920.623898][ T29] usb 3-1: SerialNumber: syz [ 920.676061][ T29] usb 3-1: config 0 descriptor?? [ 920.858995][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.038067][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.049638][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.164381][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.795812][ T5882] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 923.180422][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 923.205743][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.224870][ T5882] usb 5-1: Product: syz [ 923.240851][ T5882] usb 5-1: Manufacturer: syz [ 923.261680][ T5882] usb 5-1: SerialNumber: syz [ 923.819389][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 923.881177][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 924.261918][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 924.325824][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 924.387439][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 924.436510][ T29] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 924.487060][ T5882] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 924.515229][ T29] usb 3-1: USB disconnect, device number 38 [ 924.558480][ T5882] usb 5-1: USB disconnect, device number 50 [ 924.698933][T12262] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 924.734845][T12262] usb 4-1: USB disconnect, device number 50 [ 925.316730][ T29] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 925.347820][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 925.357938][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 925.567996][ T29] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 925.577272][ T29] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 925.644910][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 925.677573][T13349] netlink: 'syz.0.1456': attribute type 4 has an invalid length. [ 925.715673][ T29] usb 3-1: config 1 has no interface number 0 [ 925.785666][ T29] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 925.844248][ T29] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 926.074204][ T29] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 926.114773][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.314647][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 926.752513][ T29] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 926.772048][ T29] snd_usb_pod 3-1:1.1: invalid control EP [ 926.781863][ T29] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 926.797731][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 926.826197][ T29] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 928.625255][ T10] usb 3-1: USB disconnect, device number 39 [ 930.533303][T13391] syz_tun: entered allmulticast mode [ 930.795783][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 930.956067][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 930.971136][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 930.997023][ T10] usb 1-1: config 0 has no interface number 0 [ 931.028493][ T29] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 931.140758][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 931.195718][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 931.211565][ T29] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 931.241950][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.273901][ T29] usb 4-1: config 0 has no interface number 0 [ 931.310732][ T10] usb 1-1: Product: syz [ 931.330168][ T10] usb 1-1: Manufacturer: syz [ 931.335034][ T10] usb 1-1: SerialNumber: syz [ 931.360580][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 931.382824][ T10] usb 1-1: config 0 descriptor?? [ 931.396813][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.434673][ T29] usb 4-1: Product: syz [ 931.521758][ T29] usb 4-1: Manufacturer: syz [ 931.558335][ T29] usb 4-1: SerialNumber: syz [ 931.582519][ T29] usb 4-1: config 0 descriptor?? [ 931.762768][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.788316][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.846992][T13395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.858308][T13395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.893113][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.899950][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.505911][T13403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 934.918195][ T29] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 934.956094][ T10] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 935.009496][ T29] usb 4-1: USB disconnect, device number 51 [ 935.033446][ T10] usb 1-1: USB disconnect, device number 44 [ 936.909266][T13425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1471'. [ 936.993658][ T30] audit: type=1326 audit(1775855995.279:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.2.1471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8797f9c819 code=0x0 [ 938.862035][T13454] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1476'. [ 938.907071][T13454] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1476'. [ 938.941601][T13458] program syz.3.1475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.969908][T13458] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 940.350757][T13475] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 940.455888][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 940.697098][T13477] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 940.745054][T13477] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 940.758139][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 940.780659][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 940.824702][ T10] usb 5-1: config 0 has no interface number 0 [ 940.876192][T13480] bond2: (slave gretap1): making interface the new active one [ 940.908174][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 940.921559][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.938790][T13480] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 940.965040][ T10] usb 5-1: Product: syz [ 940.986892][ T10] usb 5-1: Manufacturer: syz [ 941.003923][ T10] usb 5-1: SerialNumber: syz [ 941.086997][ T10] usb 5-1: config 0 descriptor?? [ 941.140112][T13486] QAT: failed to copy from user. [ 941.287361][T13475] macvlan2: entered promiscuous mode [ 941.293368][T13475] macvlan2: entered allmulticast mode [ 941.305432][T13475] bond2: entered promiscuous mode [ 941.311037][T13475] gretap1: entered promiscuous mode [ 941.327848][T13475] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 941.353969][T13475] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 941.399461][T13475] bond2: left promiscuous mode [ 941.406654][T13475] gretap1: left promiscuous mode [ 941.574942][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.590280][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.593083][T13493] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1484'. [ 943.647152][T13494] netlink: 'syz.3.1484': attribute type 25 has an invalid length. [ 943.668994][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 943.765127][ T6276] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.777779][T13494] netlink: 'syz.3.1484': attribute type 25 has an invalid length. [ 943.795484][ T6276] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.816513][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 943.875805][ T6276] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.927179][ T6273] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.358412][ T10] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 944.378474][ T10] usb 5-1: USB disconnect, device number 51 [ 944.614554][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 945.045988][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 945.209553][T13516] tc_dump_action: action bad kind [ 946.968548][T13526] unsupported nlmsg_type 40 [ 950.195476][ T30] audit: type=1326 audit(1775856008.419:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 950.268079][ T30] audit: type=1326 audit(1775856008.419:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 950.434151][ T30] audit: type=1326 audit(1775856008.419:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 950.499172][T13560] ip6gretap0: entered promiscuous mode [ 950.505757][T13560] macvtap2: entered promiscuous mode [ 950.527082][T13560] ip6gretap0: left promiscuous mode [ 950.534807][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 950.548121][T12262] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 950.712525][ T30] audit: type=1326 audit(1775856008.419:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 950.763953][T12262] usb 4-1: Using ep0 maxpacket: 8 [ 950.889023][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 950.959843][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 951.023431][T12262] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 951.275718][ T30] audit: type=1326 audit(1775856008.419:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 951.303910][T12262] usb 4-1: config 0 has no interface number 0 [ 951.508142][ T30] audit: type=1326 audit(1775856008.429:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 951.535788][ T30] audit: type=1326 audit(1775856008.429:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 951.696641][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1499'. [ 951.785744][ T29] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 951.877952][ T30] audit: type=1326 audit(1775856008.429:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe45195d04e code=0x7ffc0000 [ 951.945684][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 952.052640][ T30] audit: type=1326 audit(1775856008.429:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 952.110704][ T29] usb 1-1: config 0 has no interfaces? [ 952.119161][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.142806][T12262] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 952.155610][T12262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.165220][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.195190][T12262] usb 4-1: Product: syz [ 952.196315][ T30] audit: type=1326 audit(1775856008.429:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45199c819 code=0x7ffc0000 [ 952.253305][ T29] usb 1-1: Manufacturer: syz [ 952.285916][T12262] usb 4-1: Manufacturer: syz [ 952.296258][ T29] usb 1-1: config 0 descriptor?? [ 952.315436][T12262] usb 4-1: SerialNumber: syz [ 952.401421][T12262] usb 4-1: config 0 descriptor?? [ 952.624655][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.636526][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.662001][ T29] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 953.955635][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 953.998439][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 954.136380][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 954.221536][ T29] usb 5-1: string descriptor 0 read error: -22 [ 954.235932][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 954.245210][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.267190][ T5933] usb 1-1: USB disconnect, device number 45 [ 954.410661][ T29] snd-ua101 5-1:1.0: invalid num_altsetting [ 954.745310][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 954.812299][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 955.785691][ T1217] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 955.851745][T13592] netlink: 'syz.1.1503': attribute type 4 has an invalid length. [ 956.075632][ T1217] usb 1-1: Using ep0 maxpacket: 16 [ 956.088410][ T1217] usb 1-1: config 0 has no interfaces? [ 956.099865][ T1217] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 956.109724][ T1217] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 956.118739][ T1217] usb 1-1: Manufacturer: syz [ 956.130486][ T1217] usb 1-1: config 0 descriptor?? [ 956.292955][T12262] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 956.304085][T12262] usb 4-1: USB disconnect, device number 52 [ 957.298898][ T5882] usb 5-1: USB disconnect, device number 52 [ 958.010371][ T5882] usb 1-1: USB disconnect, device number 46 [ 959.766490][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 959.766514][ T30] audit: type=1800 audit(1775856017.989:1031): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1511" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20008 res=0 errno=0 [ 960.529087][T13642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.703238][T13651] netlink: 'syz.4.1514': attribute type 10 has an invalid length. [ 961.718061][T13651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.008834][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 962.531118][ T30] audit: type=1326 audit(1775856020.809:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 962.595661][T12262] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 962.685801][ T5904] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 962.696742][ T30] audit: type=1326 audit(1775856020.809:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac6955d04e code=0x7ffc0000 [ 962.729351][ T30] audit: type=1326 audit(1775856020.819:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 962.773552][T12262] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 962.787116][T12262] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.817936][T12262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 962.833853][ T30] audit: type=1326 audit(1775856020.819:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 962.862363][T12262] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.885783][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 962.893756][T12262] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.914961][T12262] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.933154][ T30] audit: type=1326 audit(1775856020.819:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 962.956689][T12262] usb 5-1: Product: syz [ 962.960920][T12262] usb 5-1: Manufacturer: syz [ 962.983470][ T5904] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 962.996092][T12262] cdc_wdm 5-1:1.0: skipping garbage [ 963.134659][T12262] cdc_wdm 5-1:1.0: skipping garbage [ 963.175271][T12262] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 963.272270][ T5904] usb 3-1: config 0 has no interface number 0 [ 963.338081][ T30] audit: type=1326 audit(1775856020.819:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 963.400150][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 963.455627][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.478410][ T5904] usb 3-1: Product: syz [ 963.496335][ T5904] usb 3-1: Manufacturer: syz [ 963.516991][ T5904] usb 3-1: SerialNumber: syz [ 963.516999][ T30] audit: type=1326 audit(1775856020.819:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 963.517103][ T30] audit: type=1326 audit(1775856020.819:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6959c819 code=0x7ffc0000 [ 963.748824][ T5904] usb 3-1: config 0 descriptor?? [ 963.892742][ T30] audit: type=1326 audit(1775856020.819:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac6955d04e code=0x7ffc0000 [ 963.996347][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.017718][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.390818][T13678] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1519' sets config #2 [ 966.370779][ T10] usb 5-1: USB disconnect, device number 53 [ 966.943421][ T5904] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 967.075827][ T10] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 967.197111][ T5904] usb 3-1: USB disconnect, device number 40 [ 967.210386][T13688] netlink: 'syz.1.1521': attribute type 27 has an invalid length. [ 967.379106][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 967.401819][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 967.424056][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 967.441517][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 967.573227][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 967.887238][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 968.495743][ T5933] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 968.625054][ T10] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 968.666529][ T5933] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 968.688660][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.690944][ T5933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 968.722469][ T10] usb 5-1: Product: syz [ 968.734934][ T10] usb 5-1: Manufacturer: syz [ 968.753658][ T10] usb 5-1: SerialNumber: syz [ 968.765773][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 968.794613][ T5933] usb 1-1: Product: syz [ 968.806531][ T10] usb 5-1: config 0 descriptor?? [ 968.852087][ T10] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 968.887806][ T5933] usb 1-1: Manufacturer: syz [ 968.888395][ T10] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 968.892496][ T5933] usb 1-1: SerialNumber: syz [ 969.330716][ T5933] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 969.620790][T13712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 969.652768][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 969.730570][ C1] usblp0: nonzero write bulk status received: -71 [ 969.784319][ T10] usb 1-1: USB disconnect, device number 47 [ 969.859325][ T10] usblp0: removed [ 970.699701][ T5933] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 970.889572][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 970.899744][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 970.952934][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 971.280430][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 971.666481][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 971.698275][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 971.803947][T13729] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1528'. [ 971.841193][ T5933] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 971.864255][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.875214][T13729] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1528'. [ 971.922357][ T5933] usb 3-1: Product: syz [ 971.939707][ T5933] usb 3-1: Manufacturer: syz [ 971.944562][ T5933] usb 3-1: SerialNumber: syz [ 971.970246][T13727] fuse: Bad value for 'fd' [ 972.056420][ T5933] usb 3-1: config 0 descriptor?? [ 972.068830][ T5933] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 972.152138][ T5933] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 972.297038][ T5904] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 972.512744][ T5933] usb 5-1: USB disconnect, device number 54 [ 972.648892][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 972.815817][ T5904] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 972.841731][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.878448][ T5904] usb 1-1: Product: syz [ 972.904961][ T5904] usb 1-1: Manufacturer: syz [ 972.916222][ T5904] usb 1-1: SerialNumber: syz [ 972.974019][ T5904] usb 1-1: config 0 descriptor?? [ 973.053884][ T5904] as10x_usb: device has been detected [ 973.082685][ T5904] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 973.190954][T13727] random: crng reseeded on system resumption [ 973.267607][ T5904] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 973.330774][ T5904] as10x_usb: error during firmware upload part1 [ 973.345945][ T5904] Registered device Sky IT Digital Key (green led) [ 973.950940][T13743] ip6gretap0: entered promiscuous mode [ 974.046175][T13743] macvtap1: entered promiscuous mode [ 974.328553][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 974.329762][T13743] ip6gretap0: left promiscuous mode [ 974.485788][T13746] bridge_slave_1: left allmulticast mode [ 974.562436][T13746] bridge_slave_1: left promiscuous mode [ 974.587639][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.637167][ T10] usb 3-1: USB disconnect, device number 41 [ 974.797406][T13746] bridge_slave_0: left allmulticast mode [ 974.887585][T13746] bridge_slave_0: left promiscuous mode [ 974.946229][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.147233][ T5933] usb 1-1: USB disconnect, device number 48 [ 975.244483][ T5933] Unregistered device Sky IT Digital Key (green led) [ 975.432854][T13762] netlink: 'syz.0.1536': attribute type 15 has an invalid length. [ 975.591920][ T5933] as10x_usb: device has been disconnected [ 975.739657][T13765] ptrace attach of "./syz-executor exec"[5836] was attempted by " ./file0 \x0c  N$     \x0a     g/binder/stats 8    \x0c   blkio.bfq.dequeue [ 975.955761][ T5933] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 976.565721][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 976.738323][ T5933] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 976.747400][ T5933] usb 1-1: config 0 has no interface number 0 [ 976.801528][ T5933] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 976.901298][ T5933] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 976.915951][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.924546][ T5933] usb 1-1: Product: syz [ 976.939217][ T5933] usb 1-1: Manufacturer: syz [ 976.944053][ T5933] usb 1-1: SerialNumber: syz [ 976.984592][ T5933] usb 1-1: config 0 descriptor?? [ 977.104136][ T5933] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 977.587957][ T5933] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 977.602565][ T5933] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 977.740559][T13771] macvlan0: entered promiscuous mode [ 977.747086][T13771] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 977.754911][T13771] netlink: 'syz.2.1538': attribute type 2 has an invalid length. [ 977.902171][T13762] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 978.673749][ T5933] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 978.853815][ T5933] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 978.917992][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.995880][ T5933] usb 4-1: Product: syz [ 979.000311][ T5933] usb 4-1: Manufacturer: syz [ 979.005407][ T5933] usb 4-1: SerialNumber: syz [ 979.012856][ T5933] usb 4-1: config 0 descriptor?? [ 979.265820][ T5933] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 979.335463][T12262] usb 1-1: USB disconnect, device number 49 [ 980.135634][ T10] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 980.744147][T13799] netlink: 'syz.1.1544': attribute type 13 has an invalid length. [ 980.792107][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 980.809161][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 980.910783][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 980.945885][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 980.971184][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 981.003836][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 981.041335][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 981.173571][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.211521][ T10] usb 1-1: Product: syz [ 981.218939][ T10] usb 1-1: Manufacturer: syz [ 981.239526][ T10] usb 1-1: SerialNumber: syz [ 981.275100][ T10] usb 1-1: config 0 descriptor?? [ 981.295235][ T10] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 981.383832][ T10] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 982.551988][ T5933] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 982.568253][ T5933] usb 4-1: USB disconnect, device number 53 [ 983.288010][ T1217] usb 1-1: USB disconnect, device number 50 [ 983.827373][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1549'. [ 983.845785][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1549'. [ 985.302439][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1551'. [ 990.706914][T13885] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 990.858825][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1560'. [ 991.228752][T13891] program syz.1.1562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 992.605925][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 993.145981][T13905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.326073][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.338438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.365814][T13909] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 993.581578][T13909] bond3: entered promiscuous mode [ 993.588643][T13909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 994.439801][T13909] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 996.174191][T13930] netlink: 'syz.4.1571': attribute type 16 has an invalid length. [ 996.191966][T13930] netlink: 'syz.4.1571': attribute type 17 has an invalid length. [ 996.858110][T12262] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 997.230208][T12262] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 997.246047][T12262] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.379538][T12262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 997.405984][T12262] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 997.438427][T12262] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 997.448022][T12262] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 997.465789][T12262] usb 5-1: Product: syz [ 997.481441][T12262] usb 5-1: Manufacturer: syz [ 997.557330][T12262] cdc_wdm 5-1:1.0: skipping garbage [ 997.566404][T12262] cdc_wdm 5-1:1.0: skipping garbage [ 997.575919][T12262] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 997.832907][T12262] usb 5-1: USB disconnect, device number 55 [ 999.725122][ T5882] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 999.917874][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.942155][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.978679][ T5882] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 999.998403][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.043512][ T5882] usb 3-1: config 0 descriptor?? [ 1000.266870][T13957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.303897][T13957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.381473][T13957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.423447][T13957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.433417][T13968] fuse: Bad value for 'user_id' [ 1000.438701][T13968] fuse: Bad value for 'user_id' [ 1000.464092][T13968] Invalid argument reading file caps for ./file0 [ 1001.073858][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.116300][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.453142][ T5882] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1001.478072][ T5882] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1001.712883][ T5882] cp2112 0003:10C4:EA90.0009: error requesting version [ 1001.903430][T13689] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1002.438004][T13689] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1002.535035][ T5882] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 1002.565281][T13689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1002.575216][T13689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1002.594096][T13689] usb 4-1: Product: syz [ 1002.604274][T13689] usb 4-1: Manufacturer: syz [ 1002.614442][T13689] usb 4-1: SerialNumber: syz [ 1002.703318][ T5882] usb 3-1: USB disconnect, device number 42 [ 1002.880578][T13689] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1003.087845][T13689] usb 4-1: USB disconnect, device number 54 [ 1003.096770][T13689] usblp0: removed [ 1004.112278][T14008] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1006.120341][T14019] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1006.223574][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'. [ 1007.727524][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1007.727556][ T30] audit: type=1800 audit(1775856066.009:1047): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1592" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50199 res=0 errno=0 [ 1007.793043][T14042] input: syz0 as /devices/virtual/input/input23 [ 1009.244738][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1596'. [ 1009.419986][T14062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1010.066950][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 1010.405688][ T5882] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1010.435896][T13689] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1010.760452][T13689] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1010.775763][T13689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.790924][T13689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1010.800394][T13689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.816013][T13689] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1010.825203][T13689] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1010.834250][T13689] usb 4-1: Product: syz [ 1010.839029][T13689] usb 4-1: Manufacturer: syz [ 1010.856773][T13689] cdc_wdm 4-1:1.0: skipping garbage [ 1010.863356][T13689] cdc_wdm 4-1:1.0: skipping garbage [ 1010.879676][T13689] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1010.910160][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1010.920301][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1010.973350][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1010.991468][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1011.023510][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1011.033745][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1011.074750][T14070] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 1011.112635][ T5882] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1011.128882][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.161248][ T5882] usb 5-1: Product: syz [ 1011.171816][ T5882] usb 5-1: Manufacturer: syz [ 1011.191277][ T5882] usb 5-1: SerialNumber: syz [ 1011.214326][ T5882] usb 5-1: config 0 descriptor?? [ 1011.233012][ T5882] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 1011.296764][ T5882] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 1013.097054][T13689] usb 4-1: USB disconnect, device number 55 [ 1013.224579][T14087] bond0: (slave dummy0): Releasing backup interface [ 1013.629010][T14087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1013.713761][T14097] netlink: 'syz.1.1601': attribute type 8 has an invalid length. [ 1014.461432][T14098] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 1014.569903][T14108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.629986][T14098] syz_tun: left allmulticast mode [ 1015.495160][ T24] usb 5-1: USB disconnect, device number 56 [ 1015.939268][ T6273] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.086460][ T6273] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1016.109390][ T6273] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.374223][ T6273] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1016.424983][ T6273] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.459417][ T6273] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1016.485647][ T6273] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.515343][ T6273] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1016.945862][ T5882] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1017.135703][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 1017.222404][ T5882] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1017.339073][ T30] audit: type=1800 audit(1775856075.599:1048): pid=14135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1608" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=19783 res=0 errno=0 [ 1018.255765][ T5882] usb 5-1: config 0 has no interface number 0 [ 1018.383193][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1018.402897][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.413095][ T5882] usb 5-1: Product: syz [ 1018.417467][ T5882] usb 5-1: Manufacturer: syz [ 1018.422267][ T5882] usb 5-1: SerialNumber: syz [ 1018.449751][ T5882] usb 5-1: config 0 descriptor?? [ 1018.694927][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.716483][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.818109][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 1019.172369][T14149] tipc: Enabling of bearer rejected, failed to enable media [ 1021.323432][ T5882] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 1021.367301][ T5882] usb 5-1: USB disconnect, device number 57 [ 1021.720877][T14177] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1021.757315][T14177] ipvlan0: entered allmulticast mode [ 1021.899207][T14172] libceph: resolve '0..' (ret=-3): failed [ 1026.735731][ T24] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1026.951208][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1026.961611][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.994142][ T24] usb 1-1: Product: syz [ 1027.006086][ T24] usb 1-1: Manufacturer: syz [ 1027.010764][ T24] usb 1-1: SerialNumber: syz [ 1027.161220][ T24] usb 1-1: config 0 descriptor?? [ 1027.592066][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1028.715754][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1028.858657][T14236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.908616][T14236] overlayfs: missing 'lowerdir' [ 1028.965833][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1028.995001][ T29] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1029.025121][ T29] usb 3-1: config 0 has no interface number 0 [ 1029.070892][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1029.121031][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.169519][ T29] usb 3-1: Product: syz [ 1029.195416][ T29] usb 3-1: Manufacturer: syz [ 1029.239027][ T29] usb 3-1: SerialNumber: syz [ 1029.260728][ T29] usb 3-1: config 0 descriptor?? [ 1029.780249][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.790456][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.800198][T14240] fuse: Bad value for 'fd' [ 1029.811551][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1630'. [ 1029.921133][T14240] random: crng reseeded on system resumption [ 1030.744671][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1030.758220][ T24] usb 1-1: USB disconnect, device number 51 [ 1031.805957][ T5882] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1031.925597][ T29] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1031.974549][ T29] usb 3-1: USB disconnect, device number 43 [ 1032.001733][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 1032.050130][ T5882] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1032.066749][ T5882] usb 1-1: config 0 has no interface number 0 [ 1032.258672][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1032.281091][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.296005][ T5882] usb 1-1: Product: syz [ 1032.307830][ T5882] usb 1-1: Manufacturer: syz [ 1032.312604][ T5882] usb 1-1: SerialNumber: syz [ 1032.334713][ T5882] usb 1-1: config 0 descriptor?? [ 1032.501946][T14253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1633'. [ 1032.521595][T14253] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1633'. [ 1032.752273][T14251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.780887][T14257] x_tables: duplicate underflow at hook 4 [ 1033.076099][T14251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.106686][T13689] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1033.278252][T13689] usb 5-1: Using ep0 maxpacket: 16 [ 1033.301267][T13689] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.320904][T13689] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.353756][T13689] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1033.383356][T13689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.538678][T14265] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1033.553217][T14265] netlink: 'syz.2.1635': attribute type 2 has an invalid length. [ 1033.561946][T14265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1635'. [ 1033.948540][T13689] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1034.185111][T14257] i2c i2c-1: unsupported multi-msg i2c transaction [ 1034.253866][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 1034.287455][T13689] usb 5-1: USB disconnect, device number 58 [ 1035.720090][ T5882] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 1035.750958][ T5882] usb 1-1: USB disconnect, device number 52 [ 1037.217760][T14303] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 1037.539252][T14315] fuse: Bad value for 'fd' [ 1037.630104][T14307] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1037.701497][T14307] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1037.845100][ T5882] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1037.924997][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 1037.957725][T14311] macvlan2: entered promiscuous mode [ 1037.963513][T14311] macvlan2: entered allmulticast mode [ 1037.970476][T14311] bond5: entered promiscuous mode [ 1037.991543][T14311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1038.007841][T14311] bond5: left promiscuous mode [ 1038.056111][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 1038.364605][ T5882] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1038.380468][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.489407][ T5882] usb 1-1: Product: syz [ 1038.499447][ T5882] usb 1-1: Manufacturer: syz [ 1038.536869][ T5882] usb 1-1: SerialNumber: syz [ 1038.566987][ T5882] usb 1-1: config 0 descriptor?? [ 1038.588492][ T5882] as10x_usb: device has been detected [ 1038.595684][ T5882] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1038.760671][ T5882] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1038.790289][T14315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1644'. [ 1038.809309][T14315] random: crng reseeded on system resumption [ 1038.847628][ T5882] as10x_usb: error during firmware upload part1 [ 1038.855271][ T5882] Registered device Sky IT Digital Key (green led) [ 1040.142571][T14329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1040.651684][T14339] syz_tun: entered allmulticast mode [ 1041.761869][T12262] usb 1-1: USB disconnect, device number 53 [ 1041.862464][T12262] Unregistered device Sky IT Digital Key (green led) [ 1041.864131][T12262] as10x_usb: device has been disconnected [ 1042.995708][T13689] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1043.223645][T13689] usb 3-1: Using ep0 maxpacket: 8 [ 1043.231022][T13689] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1043.245671][T13689] usb 3-1: config 0 has no interface number 0 [ 1043.301774][T13689] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1043.357079][T13689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.371559][T13689] usb 3-1: Product: syz [ 1043.492642][T14363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.556607][T13689] usb 3-1: Manufacturer: syz [ 1043.564958][T13689] usb 3-1: SerialNumber: syz [ 1043.660779][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 1043.749102][T13689] usb 3-1: config 0 descriptor?? [ 1044.037545][T14358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.047893][T14358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.271885][T13689] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1045.627369][T13689] usb 3-1: USB disconnect, device number 44 [ 1046.990769][T14390] syz_tun (unregistering): left allmulticast mode [ 1048.957287][ T1217] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1049.333217][ T1217] usb 1-1: Using ep0 maxpacket: 8 [ 1049.693729][ T1217] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1049.723399][ T1217] usb 1-1: config 0 has no interface number 0 [ 1049.741795][ T1217] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1049.751377][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.760001][ T1217] usb 1-1: Product: syz [ 1049.764411][ T1217] usb 1-1: Manufacturer: syz [ 1049.769808][ T1217] usb 1-1: SerialNumber: syz [ 1049.787987][ T1217] usb 1-1: config 0 descriptor?? [ 1049.905612][T13689] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1050.023273][T14406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.034680][T14406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.138052][T14427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1050.315393][T13689] usb 4-1: Using ep0 maxpacket: 8 [ 1050.381223][T13689] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1050.409288][T13689] usb 4-1: config 0 has no interface number 0 [ 1050.735653][T13689] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1050.747994][T13689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.771866][T13689] usb 4-1: Product: syz [ 1050.778294][T13689] usb 4-1: Manufacturer: syz [ 1050.787913][T13689] usb 4-1: SerialNumber: syz [ 1050.820789][T13689] usb 4-1: config 0 descriptor?? [ 1051.086952][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.162136][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.195781][T12262] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1052.385706][T12262] usb 3-1: Using ep0 maxpacket: 8 [ 1052.446843][T12262] usb 3-1: no configurations [ 1052.507742][T12262] usb 3-1: can't read configurations, error -22 [ 1052.715945][T12262] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1052.945895][T12262] usb 3-1: Using ep0 maxpacket: 8 [ 1052.952777][T12262] usb 3-1: no configurations [ 1052.957831][T12262] usb 3-1: can't read configurations, error -22 [ 1053.015915][T12262] usb usb3-port1: attempt power cycle [ 1053.050362][ T1217] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 1053.138389][ T1217] usb 1-1: USB disconnect, device number 54 [ 1053.431172][T12262] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1053.479770][T12262] usb 3-1: Using ep0 maxpacket: 8 [ 1053.515172][T13689] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 1053.544785][T13689] usb 4-1: USB disconnect, device number 56 [ 1053.594659][T12262] usb 3-1: no configurations [ 1054.263902][T12262] usb 3-1: can't read configurations, error -22 [ 1054.425751][T12262] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1054.712137][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.719573][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.754084][T12262] usb 3-1: device descriptor read/8, error -71 [ 1056.916069][T12262] usb usb3-port1: unable to enumerate USB device [ 1058.334965][T14482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.399483][T14482] overlayfs: missing 'lowerdir' [ 1059.595672][T13689] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1059.765579][T13689] usb 1-1: Using ep0 maxpacket: 8 [ 1059.789754][T13689] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1059.805977][T13689] usb 1-1: config 0 has no interface number 0 [ 1059.819418][T13689] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1059.841541][T13689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.865684][T13689] usb 1-1: Product: syz [ 1059.877057][T13689] usb 1-1: Manufacturer: syz [ 1059.938778][T13689] usb 1-1: SerialNumber: syz [ 1060.023877][T13689] usb 1-1: config 0 descriptor?? [ 1060.289724][T14487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.299871][T14487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.396645][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1061.575633][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1061.600447][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1061.612328][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.666368][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.704939][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1061.716144][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.724874][ T10] usb 5-1: Product: syz [ 1061.731248][ T10] usb 5-1: Manufacturer: syz [ 1061.745179][ T10] usb 5-1: SerialNumber: syz [ 1062.299475][ T10] usb 5-1: 0:2 : does not exist [ 1062.486766][ T10] usb 5-1: USB disconnect, device number 59 [ 1062.562931][T13689] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 1062.668110][T13689] usb 1-1: USB disconnect, device number 55 [ 1063.965143][T14522] tipc: Enabled bearer , priority 0 [ 1064.054500][T14524] syzkaller0: entered promiscuous mode [ 1064.068956][T14524] syzkaller0: entered allmulticast mode [ 1064.180221][T14066] udevd[14066]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1064.239723][T14522] tipc: Resetting bearer [ 1064.257741][T14522] [U] V3Fپ"S/4:XTZWTLW= [ 1064.564616][T14539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1064.794665][T14521] [U] J"E:" [ 1064.822133][T14521] tipc: Resetting bearer [ 1065.312330][T14521] tipc: Disabling bearer [ 1065.356655][ T10] tipc: Node number set to 2130706433 [ 1066.422276][T14556] random: crng reseeded on system resumption [ 1067.692494][T14563] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1697'. [ 1068.174158][T14569] trusted_key: encrypted_key: insufficient parameters specified [ 1068.565669][T12262] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1068.776140][T12262] usb 4-1: Using ep0 maxpacket: 8 [ 1068.787731][T12262] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1068.798635][T12262] usb 4-1: config 0 has no interface number 0 [ 1069.126198][T14578] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1700'. [ 1069.538387][T12262] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1069.579100][T12262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.957406][T12262] usb 4-1: Product: syz [ 1069.970474][T12262] usb 4-1: Manufacturer: syz [ 1069.997033][T12262] usb 4-1: SerialNumber: syz [ 1070.035366][T12262] usb 4-1: config 0 descriptor?? [ 1070.820442][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.831846][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.000954][T14583] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1071.041626][T14583] ipvlan3: entered allmulticast mode [ 1071.764585][T14596] tmpfs: Unknown parameter 'i1t!' [ 1071.810488][T14598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1702'. [ 1071.873674][T14596] netlink: 'syz.4.1704': attribute type 1 has an invalid length. [ 1071.889108][T14596] netlink: 'syz.4.1704': attribute type 2 has an invalid length. [ 1071.990044][T14598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.305768][T12262] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 1074.445022][T12262] usb 4-1: USB disconnect, device number 57 [ 1074.461516][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 1074.505740][T14611] bridge_slave_0: default FDB implementation only supports local addresses [ 1076.994029][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.001705][T14626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.254080][T14636] nvme_fabrics: missing parameter 'transport=%s' [ 1077.266038][T14636] nvme_fabrics: missing parameter 'nqn=%s' [ 1077.827793][T14645] netlink: 'syz.2.1713': attribute type 61 has an invalid length. [ 1077.947975][T14648] netlink: 'syz.2.1713': attribute type 4 has an invalid length. [ 1078.697497][T14661] netlink: 'syz.0.1714': attribute type 10 has an invalid length. [ 1078.765848][T14662] netlink: 'syz.0.1714': attribute type 10 has an invalid length. [ 1079.317140][ T29] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1079.402943][T14662] dummy0: left allmulticast mode [ 1079.585922][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 1079.597483][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.611003][ T29] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1079.628081][ T29] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 1079.646806][T14661] team0: Port device dummy0 added [ 1079.654099][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.740170][ T29] usb 1-1: config 0 descriptor?? [ 1080.310617][T12262] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1080.485642][T12262] usb 4-1: Using ep0 maxpacket: 8 [ 1080.496429][T12262] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1080.505247][T12262] usb 4-1: config 0 has no interface number 0 [ 1080.515607][T12262] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1080.525191][T12262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.534031][T12262] usb 4-1: Product: syz [ 1080.539691][T12262] usb 4-1: Manufacturer: syz [ 1080.558280][T12262] usb 4-1: SerialNumber: syz [ 1080.601276][T12262] usb 4-1: config 0 descriptor?? [ 1080.943848][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.960027][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.667740][ T29] usb 1-1: USB disconnect, device number 56 [ 1082.067254][T14697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.262473][T14697] overlayfs: missing 'lowerdir' [ 1082.677409][T13689] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1083.175656][T13689] usb 5-1: Using ep0 maxpacket: 8 [ 1083.429832][T13689] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1083.448109][T13689] usb 5-1: config 0 has no interface number 0 [ 1083.754890][T13689] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1083.845572][T13689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.856737][T13689] usb 5-1: Product: syz [ 1083.861010][T13689] usb 5-1: Manufacturer: syz [ 1083.875707][T13689] usb 5-1: SerialNumber: syz [ 1083.903621][T13689] usb 5-1: config 0 descriptor?? [ 1084.584999][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.595946][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.062901][T12262] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 1085.083990][T12262] usb 4-1: USB disconnect, device number 58 [ 1085.534383][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 1086.641540][T13689] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 1086.691765][T13689] usb 5-1: USB disconnect, device number 60 [ 1088.405744][T12262] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1088.695189][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 1088.707941][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 1088.830194][T14747] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1088.837443][T12262] usb 5-1: Using ep0 maxpacket: 8 [ 1088.844573][T12262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.874799][T12262] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1088.955111][T12262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.964755][T12262] usb 5-1: Product: syz [ 1088.973053][T12262] usb 5-1: Manufacturer: syz [ 1088.980387][T12262] usb 5-1: SerialNumber: syz [ 1089.200836][T12262] usb 5-1: config 0 descriptor?? [ 1089.272281][T13689] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1089.329035][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1089.452534][T12262] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1089.606508][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1089.627711][T13689] usb 4-1: Using ep0 maxpacket: 16 [ 1089.640669][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1089.670445][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.706646][T13689] usb 4-1: config 0 has no interfaces? [ 1089.764981][ T10] usb 3-1: Product: syz [ 1089.774780][T14754] xt_hashlimit: size too large, truncated to 1048576 [ 1089.858027][T13689] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1089.885577][ T10] usb 3-1: Manufacturer: syz [ 1089.896706][ T10] usb 3-1: SerialNumber: syz [ 1089.901507][T13689] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1089.919177][ T10] usb 3-1: config 0 descriptor?? [ 1089.933576][T13689] usb 4-1: Manufacturer: syz [ 1090.023594][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1090.037323][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1090.056295][T13689] usb 4-1: config 0 descriptor?? [ 1090.131421][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1090.157456][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1090.173607][ T10] usb 3-1: media controller created [ 1090.223321][T14747] cxusb: i2c wr: len=80 is too big! [ 1090.223321][T14747] [ 1090.322082][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.490780][ T10] usb 3-1: selecting invalid altsetting 7 [ 1090.497989][ T10] cxusb: set interface failed [ 1090.503055][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1090.684006][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1090.695762][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1091.016723][ T10] rc_core: IR keymap rc-dvico-portable not found [ 1091.123504][ T10] Registered IR keymap rc-empty [ 1091.143608][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1091.209807][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input24 [ 1091.240347][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1091.255792][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1091.327592][ T10] usb 3-1: USB disconnect, device number 49 [ 1091.360636][T14771] kAFS: unable to lookup cell '' [ 1091.369627][T14771] kAFS: unable to lookup cell '(,c' [ 1091.405979][T13689] dvb-usb: bulk message failed: -22 (1/0) [ 1091.518625][T13689] dvb-usb: bulk message failed: -22 (1/0) [ 1091.688135][T14776] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1091.705677][T13689] dvb-usb: bulk message failed: -22 (1/0) [ 1091.841150][T13689] dvb-usb: bulk message failed: -22 (1/0) [ 1091.850928][ T1217] usb 5-1: USB disconnect, device number 61 [ 1092.262209][T14784] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1737'. [ 1092.323064][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1092.490140][T14784] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1092.584623][T13689] usb 4-1: USB disconnect, device number 59 [ 1092.673378][ T5882] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1092.943658][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 1093.010138][ T5882] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1093.038431][ T5882] usb 5-1: config 0 has no interface number 0 [ 1093.144934][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1093.165265][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.205614][ T5882] usb 5-1: Product: syz [ 1093.393097][ T5882] usb 5-1: Manufacturer: syz [ 1093.400678][ T5882] usb 5-1: SerialNumber: syz [ 1093.549575][ T5882] usb 5-1: config 0 descriptor?? [ 1094.057641][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.069544][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.078946][T13689] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1094.317171][T13689] usb 1-1: Using ep0 maxpacket: 16 [ 1094.339129][T13689] usb 1-1: config 0 has no interfaces? [ 1094.370975][T13689] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1094.395887][T13689] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1094.473979][T13689] usb 1-1: Manufacturer: syz [ 1094.533466][T13689] usb 1-1: config 0 descriptor?? [ 1095.000651][T14794] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1096.338753][ T5882] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 1096.413284][ T5882] usb 5-1: USB disconnect, device number 62 [ 1097.108725][ T1217] usb 1-1: USB disconnect, device number 57 [ 1098.396052][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1098.559060][ T10] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 1098.567692][ T10] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.595855][ T10] usb 4-1: config 171 has no interface number 0 [ 1098.621692][ T10] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1098.689974][ T10] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1098.760999][ T10] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1098.778331][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1098.793370][T14836] fuse: Unknown parameter '0xffffffffffffffff' [ 1098.976119][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.998730][T14838] fuse: Bad value for 'fd' [ 1099.017350][ T10] usb 4-1: Product: syz [ 1099.021882][ T10] usb 4-1: Manufacturer: syz [ 1099.028991][ T10] usb 4-1: SerialNumber: syz [ 1099.044632][T14824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1099.200554][T14830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.281227][ T29] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1099.331994][T14830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1099.555951][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1099.579449][ T29] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1099.589350][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.598448][ T29] usb 5-1: Product: syz [ 1099.605691][ T29] usb 5-1: Manufacturer: syz [ 1099.616120][ T29] usb 5-1: SerialNumber: syz [ 1099.666142][ T29] usb 5-1: config 0 descriptor?? [ 1099.721058][ T29] as10x_usb: device has been detected [ 1099.735436][ T29] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1099.876087][T14838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1749'. [ 1099.888276][T14838] random: crng reseeded on system resumption [ 1100.004191][T14842] netlink: 'syz.3.1747': attribute type 21 has an invalid length. [ 1100.035694][T14842] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1747'. [ 1100.056603][ T29] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1100.096560][T14843] netlink: 'syz.3.1747': attribute type 21 has an invalid length. [ 1100.105558][T14843] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1747'. [ 1100.146944][ T10] ath6kl: Failed to submit usb control message: -110 [ 1100.146986][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 1100.146998][ T10] ath6kl: Unable to send get target info: -110 [ 1100.206538][ T10] ath6kl: Failed to init ath6kl core: -110 [ 1100.207784][ T10] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1100.252721][ T29] as10x_usb: error during firmware upload part1 [ 1100.305666][ T29] Registered device Sky IT Digital Key (green led) [ 1100.810328][T14850] netlink: 'syz.0.1751': attribute type 61 has an invalid length. [ 1100.870974][T14850] netlink: 'syz.0.1751': attribute type 4 has an invalid length. [ 1100.912134][T14851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1750'. [ 1100.995023][T14851] libceph: resolve '0..' (ret=-3): failed [ 1101.952372][ T29] usb 4-1: USB disconnect, device number 60 [ 1102.247748][ T29] usb 5-1: USB disconnect, device number 63 [ 1102.275844][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 1102.285245][T14857] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1102.341096][T14857] openvswitch: netlink: Message has 16 unknown bytes. [ 1102.358995][ T29] Unregistered device Sky IT Digital Key (green led) [ 1102.369289][ T29] as10x_usb: device has been disconnected [ 1102.571942][T14857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1102.578689][T14857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1102.681788][T14857] vhci_hcd vhci_hcd.0: Device attached [ 1102.925687][T12262] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1103.095815][ T29] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1103.255829][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 1103.268213][ T29] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1103.285778][ T29] usb 5-1: config 0 has no interface number 0 [ 1103.332643][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1103.448591][T14871] netdevsim netdevsim0: Direct firmware load for / [ 1103.448591][T14871] failed with error -2 [ 1103.459690][T14871] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1103.459690][T14871] [ 1103.487581][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.516279][ T29] usb 5-1: Product: syz [ 1103.520831][ T29] usb 5-1: Manufacturer: syz [ 1103.549456][ T29] usb 5-1: SerialNumber: syz [ 1103.592219][ T29] usb 5-1: config 0 descriptor?? [ 1103.907386][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.910357][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.971208][T14862] vhci_hcd: connection reset by peer [ 1105.983568][T12045] vhci_hcd vhci_hcd.1: stop threads [ 1105.990820][T12045] vhci_hcd vhci_hcd.1: release socket [ 1105.998909][T12045] vhci_hcd vhci_hcd.1: disconnect device [ 1107.275087][ T29] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 1107.318756][ T29] usb 5-1: USB disconnect, device number 64 [ 1108.069584][T12262] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1110.238979][T14921] blktrace: Concurrent blktraces are not allowed on sg0 [ 1110.289136][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 1110.368600][ T30] audit: type=1326 audit(1775856168.649:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1110.462775][ T30] audit: type=1326 audit(1775856168.649:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1110.501729][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 1110.510844][ T30] audit: type=1326 audit(1775856168.649:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1110.510923][ T30] audit: type=1326 audit(1775856168.649:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1110.697639][T14925] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1765'. [ 1111.125617][ T30] audit: type=1326 audit(1775856168.649:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1111.149214][ T30] audit: type=1326 audit(1775856168.649:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1111.175667][ T30] audit: type=1326 audit(1775856168.649:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1111.212903][ T30] audit: type=1326 audit(1775856168.649:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1111.255869][ T30] audit: type=1326 audit(1775856168.649:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1111.465639][ T30] audit: type=1326 audit(1775856168.659:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14919 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f043559c819 code=0x7ffc0000 [ 1112.036446][T14937] netlink: 'syz.4.1767': attribute type 61 has an invalid length. [ 1112.212778][T14940] netlink: 'syz.4.1767': attribute type 4 has an invalid length. [ 1116.265961][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.272557][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.050216][T14984] ------------[ cut here ]------------ [ 1117.056433][T14984] !rwb [ 1117.056458][T14984] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.1.1775/14984 [ 1117.070600][T14984] Modules linked in: [ 1117.074786][T14984] CPU: 0 UID: 0 PID: 14984 Comm: syz.1.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.086188][T14984] Tainted: [L]=SOFTLOCKUP [ 1117.090904][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1117.101452][T14984] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1117.107885][T14984] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 7d b2 24 fd eb 18 e8 76 b2 24 fd eb 0d e8 6f b2 24 fd 4c 89 ff e8 97 e9 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 00 ab 11 07 [ 1117.128646][T14984] RSP: 0018:ffffc90004b9fa70 EFLAGS: 00010282 [ 1117.134850][T14984] RAX: 9ebd953eb9b89f00 RBX: 1ffff11006e72084 RCX: 0000000000000046 [ 1117.143115][T14984] RDX: 0000000000000006 RSI: ffffffff8defbe43 RDI: ffffffff8c27d580 [ 1117.151347][T14984] RBP: dffffc0000000000 R08: ffffffff9011dab7 R09: 1ffffffff2023b56 [ 1117.160634][T14984] R10: dffffc0000000000 R11: fffffbfff2023b57 R12: ffff888037390420 [ 1117.169789][T14984] R13: 0000000000000000 R14: ffff888032007000 R15: ffff888037390400 [ 1117.178788][T14984] FS: 00007ff9cadd56c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 1117.189143][T14984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.196731][T14984] CR2: 0000200000071030 CR3: 000000005a4e8000 CR4: 00000000003526f0 [ 1117.204755][T14984] Call Trace: [ 1117.208199][T14984] [ 1117.211209][T14984] blk_register_queue+0x382/0x430 [ 1117.216343][T14984] __add_disk+0x677/0xd50 [ 1117.220731][T14984] ? down_read+0x272/0x2e0 [ 1117.225189][T14984] add_disk_fwnode+0xfb/0x480 [ 1117.230227][T14984] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1117.236631][T14984] loop_add+0x85e/0xb40 [ 1117.241006][T14984] ? __pfx_loop_add+0x10/0x10 [ 1117.246291][T14984] loop_control_ioctl+0x2f8/0x5a0 [ 1117.251494][T14984] ? __fget_files+0x2a/0x420 [ 1117.257193][T14984] ? __fget_files+0x2a/0x420 [ 1117.261938][T14984] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1117.268105][T14984] ? __fget_files+0x2a/0x420 [ 1117.272817][T14984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1117.278123][T14984] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1117.283720][T14984] __se_sys_ioctl+0xfc/0x170 [ 1117.288688][T14984] do_syscall_64+0x14d/0xf80 [ 1117.293477][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.299912][T14984] ? clear_bhb_loop+0x40/0x90 [ 1117.304649][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.310882][T14984] RIP: 0033:0x7ff9c9f9c819 [ 1117.315339][T14984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.335516][T14984] RSP: 002b:00007ff9cadd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.344856][T14984] RAX: ffffffffffffffda RBX: 00007ff9ca216270 RCX: 00007ff9c9f9c819 [ 1117.353451][T14984] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000009 [ 1117.361919][T14984] RBP: 00007ff9ca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1117.370214][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.378669][T14984] R13: 00007ff9ca216308 R14: 00007ff9ca216270 R15: 00007ff9ca33fa48 [ 1117.387257][T14984] [ 1117.390490][T14984] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1117.399027][T14984] CPU: 0 UID: 0 PID: 14984 Comm: syz.1.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.410185][T14984] Tainted: [L]=SOFTLOCKUP [ 1117.414537][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1117.424974][T14984] Call Trace: [ 1117.428302][T14984] [ 1117.431250][T14984] vpanic+0x56c/0xa60 [ 1117.435259][T14984] ? __pfx__printk+0x10/0x10 [ 1117.439865][T14984] ? __pfx_vpanic+0x10/0x10 [ 1117.444852][T14984] ? is_bpf_text_address+0x292/0x2b0 [ 1117.450168][T14984] ? is_bpf_text_address+0x26/0x2b0 [ 1117.455575][T14984] panic+0xc5/0xd0 [ 1117.459353][T14984] ? __pfx_panic+0x10/0x10 [ 1117.464097][T14984] __warn+0x315/0x4f0 [ 1117.468639][T14984] ? wbt_init_enable_default+0x18a/0x220 [ 1117.474339][T14984] ? wbt_init_enable_default+0x18a/0x220 [ 1117.480110][T14984] __report_bug+0x29a/0x540 [ 1117.484847][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.492188][T14984] ? wbt_init_enable_default+0x18a/0x220 [ 1117.498153][T14984] ? __pfx___report_bug+0x10/0x10 [ 1117.504318][T14984] ? wbt_init_enable_default+0x18a/0x220 [ 1117.510593][T14984] report_bug+0x16a/0x220 [ 1117.515157][T14984] ? wbt_init_enable_default+0x18a/0x220 [ 1117.520928][T14984] ? wbt_init_enable_default+0x18c/0x220 [ 1117.527719][T14984] handle_bug+0x9c/0x200 [ 1117.532281][T14984] exc_invalid_op+0x1a/0x50 [ 1117.537569][T14984] asm_exc_invalid_op+0x1a/0x20 [ 1117.543615][T14984] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1117.550195][T14984] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 7d b2 24 fd eb 18 e8 76 b2 24 fd eb 0d e8 6f b2 24 fd 4c 89 ff e8 97 e9 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 00 ab 11 07 [ 1117.574591][T14984] RSP: 0018:ffffc90004b9fa70 EFLAGS: 00010282 [ 1117.581247][T14984] RAX: 9ebd953eb9b89f00 RBX: 1ffff11006e72084 RCX: 0000000000000046 [ 1117.589536][T14984] RDX: 0000000000000006 RSI: ffffffff8defbe43 RDI: ffffffff8c27d580 [ 1117.598251][T14984] RBP: dffffc0000000000 R08: ffffffff9011dab7 R09: 1ffffffff2023b56 [ 1117.607063][T14984] R10: dffffc0000000000 R11: fffffbfff2023b57 R12: ffff888037390420 [ 1117.616437][T14984] R13: 0000000000000000 R14: ffff888032007000 R15: ffff888037390400 [ 1117.627728][T14984] blk_register_queue+0x382/0x430 [ 1117.634372][T14984] __add_disk+0x677/0xd50 [ 1117.641844][T14984] ? down_read+0x272/0x2e0 [ 1117.649334][T14984] add_disk_fwnode+0xfb/0x480 [ 1117.655044][T14984] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1117.661430][T14984] loop_add+0x85e/0xb40 [ 1117.666456][T14984] ? __pfx_loop_add+0x10/0x10 [ 1117.671415][T14984] loop_control_ioctl+0x2f8/0x5a0 [ 1117.676595][T14984] ? __fget_files+0x2a/0x420 [ 1117.681578][T14984] ? __fget_files+0x2a/0x420 [ 1117.687015][T14984] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1117.692877][T14984] ? __fget_files+0x2a/0x420 [ 1117.697513][T14984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1117.702896][T14984] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1117.709040][T14984] __se_sys_ioctl+0xfc/0x170 [ 1117.713843][T14984] do_syscall_64+0x14d/0xf80 [ 1117.718743][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.724859][T14984] ? clear_bhb_loop+0x40/0x90 [ 1117.729652][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.735678][T14984] RIP: 0033:0x7ff9c9f9c819 [ 1117.740240][T14984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.760170][T14984] RSP: 002b:00007ff9cadd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.768622][T14984] RAX: ffffffffffffffda RBX: 00007ff9ca216270 RCX: 00007ff9c9f9c819 [ 1117.776956][T14984] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000009 [ 1117.785538][T14984] RBP: 00007ff9ca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1117.793845][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.802070][T14984] R13: 00007ff9ca216308 R14: 00007ff9ca216270 R15: 00007ff9ca33fa48 [ 1117.811212][T14984] [ 1117.814935][T14984] Kernel Offset: disabled [ 1117.819731][T14984] Rebooting in 86400 seconds..